CVE-2024-44187

Overview

Advisory: Apple Security Advisory

Impact:

Description: A malicious website may exfiltrate data cross-origin

Researchers: Narendra Bhati, Manager of Cyber Security at Suma Soft Pvt. Ltd, Pune (India)

Attribute Value
CVE CVE-2024-44187
Bugzilla 279452
Component WebKit
Bug Class CrossOrigin
Severity medium
Commit 99ec4582f9e47c6c…
Advisory Apple Advisory

Root Cause Analysis

A cross-origin issue existed with “iframe” elements. This was addressed with improved tracking of security origins.